
<!DOCTYPE html
  PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd">
<html lang="en-us" xml:lang="en-us">
<head>
      <meta http-equiv="Content-Type" content="text/html; charset=utf-8">
   
<meta http-equiv="X-UA-Compatible" content="IE=edge">
<meta name="DC.Type" content="topic">
<meta name="DC.Title" content="Security Management">
<meta name="product" content="">
<meta name="prodname" content="">
<meta name="version" content="">
<meta name="brand" content="Online_help_nwh">
<meta name="DC.Publisher" content="20250120">
<meta name="DC.Format" content="XHTML">
<meta name="DC.Identifier" content="EN-US_TOPIC_0000001206156996">
<meta name="DC.Language" content="en-us">
<link rel="stylesheet" type="text/css" href="public_sys-resources/commonltr.css">
<title>Security Management</title>
</head>
<body style="clear:both; padding-left:10px; padding-top:5px; padding-right:5px; padding-bottom:5px"><a name="EN-US_TOPIC_0000001206156996"></a><a name="EN-US_TOPIC_0000001206156996"></a>

<h1 class="topictitle1">Security Management</h1>
<div><div class="section" id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_en-us_topic_0152872047_section8391162220227"><h4 class="sectiontitle">Function Description</h4><p id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_en-us_topic_0152872047_p1742212298449">On the <strong id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_en-us_topic_0152872047_b11422229144417">Security Configuration</strong> page, you can perform the following operations:</p>
<ul id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_en-us_topic_0152872047_ul16422192954413"><li id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_en-us_topic_0152872047_li104221329104411">View and configure user security hardening rules for <span id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_ph54874673116">BMC</span> users.</li><li id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_en-us_topic_0152872047_li242212294448">View and manage the permissions of local <span id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_ph10577193181612">BMC</span> users.</li></ul>
</div>
<div class="section" id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_section2723185132611"><h4 class="sectiontitle">Parameter Description</h4>
<div class="tablenoborder"><a name="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_table1499123114383"></a><a name="en-us_topic_0000001206629050_table1499123114383"></a><table cellpadding="4" cellspacing="0" summary="" id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_table1499123114383" frame="border" border="1" rules="all"><caption><b>Table 1 </b>Security</caption><thead align="left"><tr id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_row189911431183817"><th align="left" class="cellrowborder" valign="top" width="25.330000000000002%" id="mcps1.3.2.2.2.3.1.1"><p id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_p14991163112387">Parameter</p>
</th>
<th align="left" class="cellrowborder" valign="top" width="74.67%" id="mcps1.3.2.2.2.3.1.2"><p id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_p179911931123820">Description</p>
</th>
</tr>
</thead>
<tbody><tr id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_row11991143133816"><td class="cellrowborder" valign="top" width="25.330000000000002%" headers="mcps1.3.2.2.2.3.1.1 "><p id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_p399163133813">System Lock</p>
</td>
<td class="cellrowborder" valign="top" width="74.67%" headers="mcps1.3.2.2.2.3.1.2 "><p id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_p18991431133816"><span id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_ph8991183118383">BMC</span> system lock mode, which can be enabled or disabled.</p>
<p id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_p13991143116387">This function is disabled by default.</p>
<p id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_p15991031193811">After this parameter is enabled, any attempt to modify the system configurations will be blocked, except for the following operations:</p>
<ul id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_ul1899153163815"><li id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_li18992113119388">Creating and deleting a session</li><li id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_li129921131163816">Modifying the enablement status of system lock</li><li id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_li11992113115384">Setting and controlling LED indicators, and controlling the drive LDE indicators</li><li id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_li5992193117389">Collecting historical power consumption stats and exporting collected stats</li><li id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_li1399283110382">Sending test events, re-reporting Redfish event alarms, and simulating precise alarms</li><li id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_li099293183815">One-click log collection</li><li id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_li5992731153812">Exporting configurations and downloading files</li><li id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_li15992153163820">Exporting video recordings and manually capturing screenshots</li><li id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_li1992163133815">Exporting black box data, serial port data, licenses, <span id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_ph29923313384">BMC</span> logs, and SP RAID configurations</li><li id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_li15992331183814">Mounting/unmounting CD/DVD-ROM drives to or from VMs</li><li id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_li14992931143814">Restarting OS and controlling power</li>
  <li id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_li11992133117384">Querying and exporting SEL logs</li>
  <li id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_li11992133117384">Opening the HTML5 intergrated remote console</li></ul>
<div class="note" id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_note199927318383"><span class="notetitle"> NOTE: </span><div class="notebody"><p id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_p12992173153811">This function is available only when an advanced-level license is applied. Only the administrator has the permission to configure this function.</p>
</div></div>
</td>
</tr>
<tr id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_row169921231123810"><td class="cellrowborder" valign="top" width="25.330000000000002%" headers="mcps1.3.2.2.2.3.1.1 "><p id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_p15992193114389">Enable Administrator Operations on OS</p>
</td>
<td class="cellrowborder" valign="top" width="74.67%" headers="mcps1.3.2.2.2.3.1.2 "><p id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_p1899223183813">Enables or disables the administrator operations on the service side.</p>
<p id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_p18992183183817">When administrator operations are disabled on the service side, IPMI commands related to administrator operations sent from the service side are invalid, for example, IPMI commands for adding or deleting administrators, locking system configurations, and debugging and diagnosis.</p>
<div class="p" id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_p12992173183816">By default, this function is enabled.<ul id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_ul15992163153816"><li id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_li11992143116382">Enabled: The service side can perform administrator related operations.</li><li id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_li1899253143813">Disabled: The service side cannot perform administrator related operations.</li></ul>
</div>
<p id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_p119921731183810">You are advised to disable this function on the service side. Otherwise, the service side can perform <span id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_ph149926315381">BMC</span> administrator operations, causing security risks.</p>
</td>
</tr>
<tr id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_row6992123113813"><td class="cellrowborder" valign="top" width="25.330000000000002%" headers="mcps1.3.2.2.2.3.1.1 "><p id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_p4992143113385">SSH Password Authentication</p>
</td>
<td class="cellrowborder" valign="top" width="74.67%" headers="mcps1.3.2.2.2.3.1.2 "><p id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_p2099219316382">SSH password authentication allows users to log in to the <span id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_ph1099283143818">BMC</span> over SSH by using the password or public key.</p>
<ul id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_ul1992183183810"><li id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_li1599273123815"><strong id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_b2099217315386">Disable</strong>: allows users to log in over SSH by using only public keys.</li><li id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_li3993143111387"><strong id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_b13993183193820">Enable</strong>: allows users to log in over SSH by using passwords or public keys</li></ul>
<p id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_p12993173103817">It is enabled by default.</p>
</td>
</tr>
<tr id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_row1499283133819"><td class="cellrowborder" valign="top" width="25.330000000000002%" headers="mcps1.3.2.2.2.3.1.1 "><p id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_p499373103820">Prevent DNS Rebinding</p>
</td>
<td class="cellrowborder" valign="top" width="74.67%" headers="mcps1.3.2.2.2.3.1.2 "><p id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_p6993193112388">Allows users to enable or disable the function for preventing DNS rebinding.</p>
<p id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_p299317318387">After enabling this function, you can access the <span id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_ph1799313313386">BMC</span> only using the host name, FQDN, or IP address configured on the <span id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_ph299333118381">BMC</span>.</p>
<p id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_p09931331123811">It is disabled by default.</p>
</td>
</tr>
<tr id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_row199931931173818"><td class="cellrowborder" valign="top" width="25.330000000000002%" headers="mcps1.3.2.2.2.3.1.1 "><p id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_p12993133113384">TLS Versions</p>
</td>
<td class="cellrowborder" valign="top" width="74.67%" headers="mcps1.3.2.2.2.3.1.2 "><p id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_p8993731183812">TLS protocol version used to ensure data security and integrity during communication between two applications.</p>
<p id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_p10993123133815">TLS can be enabled to ensure a secure connection between a web browser and a web server.</p>
<ul id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_ul1993133113810"><li id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_li899316312384">TLS 1.0: TLS 1.0 or 1.3 is supported.</li><li id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_li7993153114383">TLS 1.1: TLS 1.1 or 1.3 is supported.</li><li id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_li199931831153819">TLS 1.2: TLS 1.2 or 1.3 is supported.</li><li id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_li15993173183819">TLS 1.3: TLS 1.3 is supported. This parameter is selected by default and cannot be modified.</li><li id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_li8993183115387">TLS 1.2 or later: TLS 1.2 or 1.3 is supported.</li><li id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_li119935318384">TLS 1.3 only: Only TLS 1.3 is supported.</li></ul>
<p id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_p799353123818">The default value is <span class="parmvalue" id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_parmvalue699323143820"><b>TLS 1.2 or later</b></span> or <span class="parmvalue" id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_parmvalue7993203115385"><b>TLS 1.2</b></span>.</p>
<div class="note" id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_note179931931123818"><span class="notetitle"> NOTE: </span><div class="notebody"><ul id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_ul18993131113820"><li id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_li3993113114388">If only TLS 1.3 is enabled, AdoptOpenJDK 11 must be used to access the Java Integrated Remote Console.</li><li id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_li17993133115382">This option is valid only for <span id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_ph209931731173814">BMC</span> web and Redfish services.</li></ul>
</div></div>
</td>
</tr>
<tr id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_row799363133814"><td class="cellrowborder" valign="top" width="25.330000000000002%" headers="mcps1.3.2.2.2.3.1.1 "><p id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_p13994173143814">Inactive Timelimit (days)</p>
</td>
<td class="cellrowborder" valign="top" width="74.67%" headers="mcps1.3.2.2.2.3.1.2 "><p id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_p1899412313382">Maximum idle period (in days) after which the user account will be disabled.</p>
<p id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_p149941331133813">Value:</p>
<ul id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_ul3994113113381"><li id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_li999412314388">0</li><li id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_li15994731143811">30 to 365</li></ul>
<p id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_p799463112382">The value <strong id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_b13994331193812">0</strong> indicates unlimited time, that is, idle user accounts will never be disabled.</p>
<p id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_p1799411313380">Default value: <strong id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_b1499433103810">0</strong></p>
</td>
</tr>
<tr id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_row5993631123819"><td class="cellrowborder" valign="top" width="25.330000000000002%" headers="mcps1.3.2.2.2.3.1.1 "><p id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_p129941131183820">Emergency Login User</p>
</td>
<td class="cellrowborder" valign="top" width="74.67%" headers="mcps1.3.2.2.2.3.1.2 "><p id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_p0994731173818">User name for logging in to the <span id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_ph9994123114381">BMC</span> in emergencies.</p>
<p id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_p1599423173812">This user is not restricted by any login rules or login interfaces, and the password of this user will never expire.</p>
<p id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_p149946311381">The default value is <span class="parmvalue" id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_parmvalue13994163113385"><b>NULL</b></span>.</p>
<div class="note" id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_note9994153183811"><span class="notetitle"> NOTE: </span><div class="notebody"><ul id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_ul1999453113382"><li id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_li1499413119381">Only an administrator can be set as the emergency login user.</li><li id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_li1994203111387">The emergency login user is visible only to the administrator.</li></ul>
</div></div>
</td>
</tr>
<tr id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_row499314315386"><td class="cellrowborder" valign="top" width="25.330000000000002%" headers="mcps1.3.2.2.2.3.1.1 "><p id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_p1199413117387">User Lockout Policy</p>
</td>
<td class="cellrowborder" valign="top" width="74.67%" headers="mcps1.3.2.2.2.3.1.2 "><p id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_p169943317383">Maximum number of consecutive invalid login attempts allowed and the account locking duration.</p>
<ul id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_ul4994103133814"><li id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_li14994103163813">The maximum number of consecutive invalid login attempts allowed is an integer ranging from 1 to 6 or <strong id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_b1299403120385">Unlimited</strong> (account locking disabled), and the default value is 5.</li><li id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_li17994163112386">The account locking duration (in minutes) is an integer ranging from 1 to 30, and the default value is 5.</li></ul>
<p id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_p1399410319388">After a user account is locked, the user can attempt to log in only after the account locking duration expires.</p>
<div class="note" id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_note1799473118388"><span class="notetitle"> NOTE: </span><div class="notebody"><ul id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_ul899412318389"><li id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_li799433163812">For security purposes, enable the account lock function.</li><li id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_li9994931143815">To unlock a user account in emergencies, run the <strong id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_b19994231113817">unlock</strong> command on the CLI. For details, see the <em id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_i1199418312385"><span id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_ph13994193117382">BMC</span> User Guide</em> of the server.</li></ul>
</div></div>
</td>
</tr>
<tr id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_row14993153117384"><td class="cellrowborder" valign="top" width="25.330000000000002%" headers="mcps1.3.2.2.2.3.1.1 "><p id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_p29941731153815">Certificate Expiry Notification (days)</p>
</td>
<td class="cellrowborder" valign="top" width="74.67%" headers="mcps1.3.2.2.2.3.1.2 "><p id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_p49941131193811">Number of days in advance users are notified that the <span id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_ph99941331173811">BMC</span> certificates are about to expire. For example, if it is set to <strong id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_b59941131203817">7</strong>, an alarm will be reported when the certificate expiry time is less than or equal to 7 days.</p>
<p id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_p29941331133815">Value range: 7 to 180</p>
<p id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_p0994163110385">Default value: <strong id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_b3994831153812">90</strong></p>
</td>
</tr>
<tr id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_row79940316385"><td class="cellrowborder" valign="top" width="25.330000000000002%" headers="mcps1.3.2.2.2.3.1.1 "><p id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_p9994203193813">CRL Expiration Detection Mode</p>
</td>
<td class="cellrowborder" valign="top" width="74.67%" headers="mcps1.3.2.2.2.3.1.2 "><p id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_p699411310388">Mode for checking whether the <span id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_ph1399411316387">BMC</span> certificate revocation list (CRL) expires.</p>
<ul id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_ul4994153112382"><li id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_li14994153163818"><strong id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_b1799483111385">Automatic</strong>: An alarm is generated when the CRL remaining lifetime (%) is less      than or equal to 5%.</li></ul>
<p id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_p99941431113816">CRL remaining lifetime (%) = (CRL expiration time – Current time)/(CRL lifetime)</p>
<ul id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_ul39943319382"><li id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_li1994331133810"><strong id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_b10994173183819">Specify</strong>: An alarm is generated when the CRL remaining lifetime (days) is      less than a specified value.</li></ul>
<p id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_p14994143117382">CRL remaining lifetime (days) = CRL expiration time – Current time</p>
<p id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_p39944310389">Default value: <strong id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_b1699593113383">Specify</strong></p>
</td>
</tr>
<tr id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_row20994153163817"><td class="cellrowborder" valign="top" width="25.330000000000002%" headers="mcps1.3.2.2.2.3.1.1 "><p id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_p11995183117385">CRL Expiration Notification (days)</p>
</td>
<td class="cellrowborder" valign="top" width="74.67%" headers="mcps1.3.2.2.2.3.1.2 "><p id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_p19995631113811">Number of days in advance users are notified that the <span id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_ph20995113143816">BMC</span> CRL is about to expire.</p>
<p id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_p099533116385">Value range: 0 to 180</p>
<p id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_p89956312389">Default value: <strong id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_b699510315389">90</strong></p>
<div class="note" id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_note1299593114384"><span class="notetitle"> NOTE: </span><div class="notebody"><ul id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_ul15995193114382"><li id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_li1799513317384">If the value is set to <strong id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_b1999518318381">0</strong>, this notification function is disabled.</li><li id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_li19951531113817">Only when <strong id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_b119959319384">CRL Expiration Detection Mode</strong> is set to <strong id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_b1599513193817">Specify</strong>, it is available to set <strong id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_b199952314385">CRL Expiration Notification (days)</strong>.</li></ul>
</div></div>
</td>
</tr>
<tr id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_row1999453133814"><td class="cellrowborder" valign="top" width="25.330000000000002%" headers="mcps1.3.2.2.2.3.1.1 "><p id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_p119921031173810">Password Complexity Check</p>
</td>
<td class="cellrowborder" valign="top" width="74.67%" headers="mcps1.3.2.2.2.3.1.2 "><p id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_p17992113118388">Password check verifies whether the passwords meet complexity requirements.</p>
<div class="p" id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_p17992031153817">The password check function is enabled by default. The check includes:<ul id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_ul1199273119384"><li id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_li1199203153813">Complexity check of local user passwords, trap community names, SNMPv1/v2c community names, SNMPv3 encryption passwords, and VNC passwords.</li><li id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_li999283119389">Minimum length check of local user passwords and SNMPv3 encryption passwords.</li></ul>
</div>
<div class="note" id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_note5992163111385"><span class="notetitle"> NOTE: </span><div class="notebody"><ul id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_ul399210313387"><li id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_li5992143113388">For security purposes, enable password check.</li><li id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_li179921231123810">If weak password check is enabled, the password cannot be the same as the passwords contained in the weak password dictionary. (You can run the <strong id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_b899217313383">ipmcset -t user -d weakpwddic -v export</strong> command to export the weak passwords from the weak password dictionary.)</li></ul>
</div></div>
</td>
</tr>
<tr id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_row699483117382"><td class="cellrowborder" valign="top" width="25.330000000000002%" headers="mcps1.3.2.2.2.3.1.1 "><p id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_p99936310384">Password Validity (days)</p>
</td>
<td class="cellrowborder" valign="top" width="74.67%" headers="mcps1.3.2.2.2.3.1.2 "><p id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_p099343163811">Validity period (in days) of a user password.</p>
<p id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_p199373163820">Value range: 0 to 365</p>
<p id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_p3993133116386">The value <strong id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_b699317315381">0</strong> indicates that the password never expires.</p>
<p id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_p109931231143819">Default value: <strong id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_b1699383118388">0</strong></p>
<div class="note" id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_note6993193173820"><span class="notetitle"> NOTE: </span><div class="notebody"><p id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_p1993193173820">For security purposes, set a proper password validity period and change the password periodically.</p>
</div></div>
</td>
</tr>
<tr id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_row2099416318386"><td class="cellrowborder" valign="top" width="25.330000000000002%" headers="mcps1.3.2.2.2.3.1.1 "><p id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_p11993133118383">Minimum Password Length</p>
</td>
<td class="cellrowborder" valign="top" width="74.67%" headers="mcps1.3.2.2.2.3.1.2 "><p id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_p9993231193815">Minimum length of the local user password or SNMPv3 encryption password.</p>
<p id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_p2993231123817">This parameter is valid only when the password check function is enabled.</p>
<p id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_p1499316315386">Value range: 8 to 20</p>
<p id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_p499317318385">Default value: <strong id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_b1899319317387">8</strong></p>
</td>
</tr>
<tr id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_row179951631183815"><td class="cellrowborder" valign="top" width="25.330000000000002%" headers="mcps1.3.2.2.2.3.1.1 "><p id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_p17993153133812">Minimum Password Age (days)</p>
</td>
<td class="cellrowborder" valign="top" width="74.67%" headers="mcps1.3.2.2.2.3.1.2 "><p id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_p10993331113819">Minimum time (in days) for which the password must be used. The password cannot be changed during this period.</p>
<p id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_p799363103813">Value range: 0 to 365</p>
<p id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_p10993173173814">The value <strong id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_b1299303123817">0</strong> indicates that the passwords do not have a minimum password age.</p>
<p id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_p1299363111381">Default value: <strong id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_b12993631133816">0</strong></p>
<div class="note" id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_note1899353112384"><span class="notetitle"> NOTE: </span><div class="notebody"><p id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_p3993183193816">The minimum password age must be at least ten days earlier than the password expiration day.</p>
<ul id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_ul399383114385"><li id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_li16993203114386">If <strong id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_b699317317385">Password Expiration (Days)</strong> is <strong id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_b1699353118383">10</strong> or less, <strong id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_b6993143193812">Minimum Password Age (Days)</strong> can only be <strong id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_b7994531143818">0</strong>.</li><li id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_li199948313381">If <strong id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_b12994631133815">Minimum Password Age (Days)</strong> is <strong id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_b12994193117381">355</strong> or more, <strong id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_b1899419311386">Password Expiration (Days)</strong> can only be <strong id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_b11994731183818">0</strong>.</li></ul>
</div></div>
</td>
</tr>
<tr id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_row554612228429"><td class="cellrowborder" valign="top" width="25.330000000000002%" headers="mcps1.3.2.2.2.3.1.1 "><p id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_p19994123183813">Previous Passwords Disallowed</p>
</td>
<td class="cellrowborder" valign="top" width="74.67%" headers="mcps1.3.2.2.2.3.1.2 "><p id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_p14994103112381">Number of previous passwords that cannot be reused as a new password.</p>
<p id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_p4994113119387">Value range: 0 to 5</p>
<p id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_p1299415316388">The value <strong id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_b15994331143815">0</strong> indicates that all previous passwords are allowed.</p>
<p id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_p1999417313382">Default value: <strong id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_b79949319383">5</strong></p>
</td>
</tr>
<tr id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_row59946190426"><td class="cellrowborder" valign="top" width="25.330000000000002%" headers="mcps1.3.2.2.2.3.1.1 "><p id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_p1449024619714">Local User Password Verification Rule</p>
</td>
<td class="cellrowborder" valign="top" width="74.67%" headers="mcps1.3.2.2.2.3.1.2 "><p id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_p5442359152113">Rule used to verify the password of a local user.</p>
<ul id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_ul94421859112111"><li id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_li744213595213"><strong id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_b244315591210">Default</strong>: Use the regular expression of <span id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_ph11310143716229">BMC</span> to verify the local user password.</li><li id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_li044319599219"><strong id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_b14431659182120">Custom regular expression</strong>: Use the user-defined regular expression to verify the local user password.</li><li id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_li154431659122117"><strong id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_b54431559202114">Default + Custom regular expression</strong>: Use the regular expression of <span id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_ph28019515239">BMC</span> and the user-defined regular expression to verify the local user password.</li></ul>
<p id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_p744355912114">Default value: <strong id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_b84431159122111">Default</strong></p>
<div class="note" id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_note9687175503313"><span class="notetitle"> NOTE: </span><div class="notebody"><ul id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_ul176342792315"><li id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_li20251231182311">Only administrators and user-defined users with the security configuration permission can set the verification rule.</li><li id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_li26320271233">The verification rule takes effect only when the password complexity check is enabled.</li></ul>
</div></div>
</td>
</tr>
<tr id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_row19701924184612"><td class="cellrowborder" valign="top" width="25.330000000000002%" headers="mcps1.3.2.2.2.3.1.1 "><p id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_p41256521778">Regular Expression for Verifying the Local User Password</p>
</td>
<td class="cellrowborder" valign="top" width="74.67%" headers="mcps1.3.2.2.2.3.1.2 "><p id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_p15982416102418">Regular expression used to verify the password of a local user.</p>
<p id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_p89822165249">Value: A string of 0 to 255 characters. It can be an empty string or a valid regular expression with the start character (^) and end character ($).</p>
<div class="note" id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_note0342455133618"><span class="notetitle"> NOTE: </span><div class="notebody"><ul id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_ul1924803292416"><li id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_li1424883219242">Only when the verification rule is set to <strong id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_b1224853232418">Custom regular expression</strong> or <strong id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_b17248113252416">Default + Custom regular expression</strong>, it is available to customize a regular expression for verification.</li><li id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_li4184637102411">The custom regular expression for verification takes effect only when the password complexity check is enabled.</li><li id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_li1424918327245">Password complexity verification will fail if the string is empty.</li></ul>
</div></div>
</td>
</tr>
<tr id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_row1973821724211"><td class="cellrowborder" valign="top" width="25.330000000000002%" headers="mcps1.3.2.2.2.3.1.1 "><p id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_p5241302089">SNMP Community Name Verification Rule</p>
</td>
<td class="cellrowborder" valign="top" width="74.67%" headers="mcps1.3.2.2.2.3.1.2 "><p id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_p1765333211250">Rule used to verify an SNMP community name.</p>
<ul id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_ul0653203292510"><li id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_li1165363213253"><strong id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_b565363220254">Default</strong>: Use the regular expression of <span id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_ph187741243152512">BMC</span> to verify the SNMP community name.</li><li id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_li865373210259"><strong id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_b1065310329255">Custom regular expression</strong>: Use the user-defined regular expression to verify the SNMP community name.</li><li id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_li66531432142515"><strong id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_b16531832202518">Default + Custom regular expression</strong>: Use the regular expression of <span id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_ph258834719254">BMC</span> and the user-defined regular expression to verify the SNMP community name.</li></ul>
<p id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_p265343215250">Default value: <strong id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_b1865333213258">Default</strong></p>
<div class="note" id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_note18892182815368"><span class="notetitle"> NOTE: </span><div class="notebody"><ul id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_ul268621732617"><li id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_li71065259266">Only administrators and user-defined users with the security configuration permission can set the verification rule.</li><li id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_li86861617102620">The verification rule takes effect only when the password complexity check is enabled.</li></ul>
</div></div>
</td>
</tr>
<tr id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_row152749157424"><td class="cellrowborder" valign="top" width="25.330000000000002%" headers="mcps1.3.2.2.2.3.1.1 "><p id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_p8197570818">Regular Expression for Verifying the SNMP Community Name</p>
</td>
<td class="cellrowborder" valign="top" width="74.67%" headers="mcps1.3.2.2.2.3.1.2 "><p id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_p32041643112612">Regular expression used to verify the SNMP community name.</p>
<p id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_p1420517433262">Value: A string of 0 to 255 characters. It can be an empty string or a valid regular expression with the start character (^) and end character ($).</p>
<div class="note" id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_note2217132019552"><span class="notetitle"> NOTE: </span><div class="notebody"><ul id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_ul829235213269"><li id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_li192921352172610">Only when the verification rule is set to <strong id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_b9292195212269">Custom regular expression</strong> or <strong id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_b12292125218265">Default + Custom regular expression</strong>, it is available to customize a regular expression for verification.</li><li id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_li1926635522613">The custom regular expression for verification takes effect only when the password complexity check is enabled.</li><li id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_li32921652102619">Password complexity verification will fail if the string is empty.</li></ul>
</div></div>
</td>
</tr>
<tr id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_row15667212144219"><td class="cellrowborder" valign="top" width="25.330000000000002%" headers="mcps1.3.2.2.2.3.1.1 "><p id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_p13873131518816">VNC Password Verification Rule</p>
</td>
<td class="cellrowborder" valign="top" width="74.67%" headers="mcps1.3.2.2.2.3.1.2 "><p id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_p4934122116279">Rule used to verify the VNC password.</p>
<ul id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_ul7934182152710"><li id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_li79343217273"><strong id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_b9934142112713">Default</strong>: Use the regular expression of <span id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_ph108523415272">BMC</span> to verify the VNC password.</li><li id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_li1693414213274"><strong id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_b169341921182717">Custom regular expression</strong>: Use the user-defined regular expression to verify the VNC password.</li><li id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_li693412211275"><strong id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_b1393472142710">Default + Custom regular expression</strong>: Use the regular expression of <span id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_ph1330103914274">BMC</span> and the user-defined regular expression to verify the VNC password.</li></ul>
<p id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_p11934122115270">Default value: <strong id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_b179341321142711">Default</strong></p>
<div class="note" id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_note102001631173619"><span class="notetitle"> NOTE: </span><div class="notebody"><ul id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_ul7660191918286"><li id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_li663422118283">Only administrators and user-defined users with the security configuration permission can set the verification rule.</li><li id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_li12661141914289">The verification rule takes effect only when the password complexity check is enabled.</li></ul>
</div></div>
</td>
</tr>
<tr id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_row14227381374"><td class="cellrowborder" valign="top" width="25.330000000000002%" headers="mcps1.3.2.2.2.3.1.1 "><p id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_p102316381179">Regular Expression for Verifying the VNC Password</p>
</td>
<td class="cellrowborder" valign="top" width="74.67%" headers="mcps1.3.2.2.2.3.1.2 "><p id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_p23011840112810">Regular expression used to verify the VNC password.</p>
<p id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_p03011240132815">Value: A string of 0 to 255 characters. It can be an empty string or a valid regular expression with the start character (^) and end character ($).</p>
<div class="note" id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_note152294246551"><span class="notetitle"> NOTE: </span><div class="notebody"><ul id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_ul165723492288"><li id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_li155721749112818">Only when the verification rule is set to <strong id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_b1957211499284">Custom regular expression</strong> or <strong id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_b195721649132813">Default + Custom regular expression</strong>, it is available to customize a regular expression for verification.</li><li id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_li20268125372812">The custom regular expression for verification takes effect only when the password complexity check is enabled.</li><li id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_li35721649152818">Password complexity verification will fail if the string is empty.</li></ul>
</div></div>
</td>
</tr>
</tbody>
</table>
</div>

<div class="tablenoborder"><a name="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_table98235518268"></a><a name="en-us_topic_0000001206629050_table98235518268"></a><table cellpadding="4" cellspacing="0" summary="" id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_table98235518268" frame="border" border="1" rules="all"><caption><b>Table 2 </b>Login rules</caption><thead align="left"><tr id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_row11073529263"><th align="left" class="cellrowborder" valign="top" width="25%" id="mcps1.3.2.3.2.3.1.1"><p id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_p13107195210267">Parameter</p>
</th>
<th align="left" class="cellrowborder" valign="top" width="75%" id="mcps1.3.2.3.2.3.1.2"><p id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_p1510795262616">Description</p>
</th>
</tr>
</thead>
<tbody><tr id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_row11969152818491"><td class="cellrowborder" valign="top" width="25%" headers="mcps1.3.2.3.2.3.1.1 "><p id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_p1136894361820">Name</p>
</td>
<td class="cellrowborder" valign="top" width="75%" headers="mcps1.3.2.3.2.3.1.2 "><p id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_p93681243191820">Name of a rule.</p>
</td>
</tr>
<tr id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_row510725242616"><td class="cellrowborder" valign="top" width="25%" headers="mcps1.3.2.3.2.3.1.1 "><p id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_en-us_topic_0152872047_p959913916197">Time</p>
</td>
<td class="cellrowborder" valign="top" width="75%" headers="mcps1.3.2.3.2.3.1.2 "><p id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_en-us_topic_0152872047_p15133447162011">Time period in which users are allowed to log in.</p>
<p id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_en-us_topic_0152872047_p6615119141916">The value can be in one of the following formats:</p>
<ul id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_en-us_topic_0152872047_ul9786141914195"><li id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_en-us_topic_0152872047_li1078614194193"><em id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_en-us_topic_0152872047_i878661961919">YYYY</em>-<em id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_en-us_topic_0152872047_i17786111910194">MM</em>-<em id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_en-us_topic_0152872047_i1378614195196">DD</em>:<p id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_en-us_topic_0152872047_p15240026101914">Example value: <strong id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_en-us_topic_0152872047_b545183744118">2013-08-30</strong> to <strong id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_en-us_topic_0152872047_b11786171910199">2013-12-30</strong></p>
</li><li id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_en-us_topic_0152872047_li1478641916194"><em id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_en-us_topic_0152872047_i1080316195193">HH</em>:<em id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_en-us_topic_0152872047_i10803171918194">MM</em>:<p id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_en-us_topic_0152872047_p964613286192">Example value: <strong id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_en-us_topic_0152872047_b95401154204118">08:30</strong> to <strong id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_en-us_topic_0152872047_b0803619131910">20:30</strong></p>
</li><li id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_en-us_topic_0152872047_li28345342194"><em id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_en-us_topic_0152872047_i1834123441919">YYYY</em>-<em id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_en-us_topic_0152872047_i683463415199">MM</em>-<em id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_en-us_topic_0152872047_i783414348192">DD</em> <em id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_en-us_topic_0152872047_i2834123481918">HH</em>:<em id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_en-us_topic_0152872047_i108341634101913">MM</em>:<p id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_en-us_topic_0152872047_p12114203671920">Example value: <strong id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_en-us_topic_0152872047_b11803141951912">2013-08-30 08:30</strong> to <strong id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_en-us_topic_0152872047_b15803171915193">2013-12-30 20:30</strong></p>
</li></ul>
<div class="note" id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_en-us_topic_0152872047_note48331438198"><span class="notetitle"> NOTE: </span><div class="notebody"><ul id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_en-us_topic_0152872047_ul216215518195"><li id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_en-us_topic_0152872047_li5162055111917">The time must be between 1970 and 2050.</li><li id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_en-us_topic_0152872047_li01624554197">The start and end time for a login rule must be in the same format.</li></ul>
</div></div>
</td>
</tr>
<tr id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_row14107105213266"><td class="cellrowborder" valign="top" width="25%" headers="mcps1.3.2.3.2.3.1.1 "><p id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_en-us_topic_0152872047_p19281114172511">IP</p>
</td>
<td class="cellrowborder" valign="top" width="75%" headers="mcps1.3.2.3.2.3.1.2 "><p id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_p197191872038">IP address or IP network segment allowed for login. The following formats are supported:</p>
<ul id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_ul27476141317"><li id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_li1974751412312"><em id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_i10961345162717">xxx.xxx.xxx.xxx</em>: an IPv4 address of a single user.</li><li id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_li287201719314"><em id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_i167741339132717">xxx.xxx.xxx.xxx/mask</em>: an IPv4 network segment. <strong id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_b7391646202812">mask</strong> indicates the subnet mask length, which ranges from <strong id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_b121607092915">1</strong> to <strong id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_b990531162920">32</strong>.</li><li id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_li133051207317"><em id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_i121208452818">XXXX:XXXX:XXXX:XXXX:XXXX:XXXX:XXXX:XXXX</em>: an IPv6 address of a single user. Two or more consecutive groups of 0s in the address can be replaced by two colons (::).</li><li id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_li116921422032"><em id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_i18065286288">XXXX:XXXX:XXXX:XXXX:XXXX:XXXX:XXXX:XXXX/mask</em>: an IPv6 network segment. <strong id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_b1056075510288">mask</strong> indicates the subnet mask length, which ranges from <strong id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_b13945649295">1</strong> to <strong id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_b171676762914">128</strong>.</li></ul>
<div class="note" id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_note1244321655"><span class="notetitle"> NOTE: </span><div class="notebody"><p id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_p14442817515"><span id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_ph12381724121910">BMC</span>300 5.08.00.01 and later versions support IPv6 login rules. If the version is rolled back to an earlier version, the configured IPv6 login rules will become invalid.</p>
</div></div>
</td>
</tr>
<tr id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_row5107852182612"><td class="cellrowborder" valign="top" width="25%" headers="mcps1.3.2.3.2.3.1.1 "><p id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_en-us_topic_0152872047_p79283145257">MAC</p>
</td>
<td class="cellrowborder" valign="top" width="75%" headers="mcps1.3.2.3.2.3.1.2 "><p id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_en-us_topic_0152872047_p69281414172520">MAC address or MAC address range allowed for login. The value can be in one of the following formats:</p>
<ul id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_en-us_topic_0152872047_ul199281114162516"><li id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_en-us_topic_0152872047_li3928181412519"><em id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_en-us_topic_0152872047_i1092831415253">xx:xx:xx:xx:xx:xx</em>: indicates a MAC address.</li><li id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_en-us_topic_0152872047_li1992801414257"><em id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_en-us_topic_0152872047_i19928814102512">xx:xx:xx</em>: indicates a MAC address segment.</li></ul>
</td>
</tr>
<tr id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_row1315018157424"><td class="cellrowborder" valign="top" width="25%" headers="mcps1.3.2.3.2.3.1.1 "><p id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_p515081504217">Status</p>
</td>
<td class="cellrowborder" valign="top" width="75%" headers="mcps1.3.2.3.2.3.1.2 "><p id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_en-us_topic_0152871978_p5815844181715">Current status of the login rules.</p>
<p id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_p766217153480">It is disabled by default.</p>
</td>
</tr>
<tr id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_row15304440175012"><td class="cellrowborder" valign="top" width="25%" headers="mcps1.3.2.3.2.3.1.1 "><p id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_p88704417211">Operation</p>
</td>
<td class="cellrowborder" valign="top" width="75%" headers="mcps1.3.2.3.2.3.1.2 "><p id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_p38701341162116">Click <strong id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_b103351024104318">Edit</strong>. The <strong id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_b198031443431">Time</strong>, <strong id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_b1526684684319">IP</strong>, <strong id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_b19915185110433">MAC</strong>, and <strong id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_b17692181134413">Status</strong> fields of the login rule are editable.</p>
</td>
</tr>
</tbody>
</table>
</div>

<div class="tablenoborder"><a name="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_table8169181424213"></a><a name="en-us_topic_0000001206629050_table8169181424213"></a><table cellpadding="4" cellspacing="0" summary="" id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_table8169181424213" frame="border" border="1" rules="all"><caption><b>Table 3 </b>Rights Management</caption><thead align="left"><tr id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_row1034951416425"><th align="left" class="cellrowborder" valign="top" width="25.05%" id="mcps1.3.2.4.2.3.1.1"><p id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_p434971410422">Parameter</p>
</th>
<th align="left" class="cellrowborder" valign="top" width="74.95%" id="mcps1.3.2.4.2.3.1.2"><p id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_p6349121434212">Description</p>
</th>
</tr>
</thead>
<tbody><tr id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_row8349191404210"><td class="cellrowborder" valign="top" width="25.05%" headers="mcps1.3.2.4.2.3.1.1 "><p id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_en-us_topic_0152872047_p7418151111414">Administrator</p>
</td>
<td class="cellrowborder" valign="top" width="74.95%" headers="mcps1.3.2.4.2.3.1.2 "><p id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_en-us_topic_0152872047_p741813119149">User who can perform all operations.</p>
<p id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_en-us_topic_0152872047_p341831141414">The permissions of <strong id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_en-us_topic_0152872047_b1241811141412">Administrator</strong> cannot be changed.</p>
</td>
</tr>
<tr id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_row1134911149424"><td class="cellrowborder" valign="top" width="25.05%" headers="mcps1.3.2.4.2.3.1.1 "><p id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_en-us_topic_0152872047_p204181910146">Operator</p>
</td>
<td class="cellrowborder" valign="top" width="74.95%" headers="mcps1.3.2.4.2.3.1.2 "><p id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_en-us_topic_0152872047_p124181111146">User who can perform basic management, KVM management, VMM management, and power control, query information, and configure their own passwords.</p>
<p id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_en-us_topic_0152872047_p164181415140">The permissions of <strong id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_en-us_topic_0152872047_b1741810117146">Operator</strong> cannot be changed.</p>
</td>
</tr>
<tr id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_row143499149429"><td class="cellrowborder" valign="top" width="25.05%" headers="mcps1.3.2.4.2.3.1.1 "><p id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_en-us_topic_0152872047_p74337119142">Common User</p>
</td>
<td class="cellrowborder" valign="top" width="74.95%" headers="mcps1.3.2.4.2.3.1.2 "><p id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_en-us_topic_0152872047_p6433101131417">User who can query information and configure their own passwords.</p>
<p id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_en-us_topic_0152872047_p84331614147">The permissions of <strong id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_en-us_topic_0152872047_b11433131161418">Common User</strong> cannot be changed.</p>
</td>
</tr>
<tr id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_row143491414134218"><td class="cellrowborder" valign="top" width="25.05%" headers="mcps1.3.2.4.2.3.1.1 "><p id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_en-us_topic_0152872047_p144331812145">Custom Role 1 to 4</p>
</td>
<td class="cellrowborder" valign="top" width="74.95%" headers="mcps1.3.2.4.2.3.1.2 "><p id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_en-us_topic_0152872047_p2043381121415">User who can perform the specified operations.</p>
<p id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_p46334542212">The information query and password configuration permissions are enabled by default. The <span class="parmname" id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_parmname692623783617"><b>Query</b></span> and <span class="parmname" id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_parmname15223542173614"><b>Own Password &amp; SSH</b></span> permissions setting cannot be changed. Custom roles do not have the user management permission.</p>
</td>
</tr>
<tr id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_row16349191474214"><td class="cellrowborder" valign="top" width="25.05%" headers="mcps1.3.2.4.2.3.1.1 "><p id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_en-us_topic_0152872047_p124334191412">User Mgmt</p>
</td>
<td class="cellrowborder" valign="top" width="74.95%" headers="mcps1.3.2.4.2.3.1.2 "><p id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_en-us_topic_0152872047_p2565115614505">Perform user and password configuration.</p>
<p id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_en-us_topic_0152872047_p1681325713505"><strong id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_en-us_topic_0152872047_b18131457105015">User Mgmt</strong> includes the following:</p>
<ul id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_en-us_topic_0152872047_ul1684794623017"><li id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_en-us_topic_0152872047_li08474460307">Configuration of local, online, and LDAP users</li><li id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_en-us_topic_0152872047_li94371723112015">Configuration of SSH password authentication</li></ul>
<ul id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_ul1684794623017"><li id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_li1782517199311">License management and rights management</li><li id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_li1161512412215">Rights management</li><li id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_li28481846193019">SNMPv1/v2c/v3 configuration</li><li id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_en-us_topic_0152872047_li7848124618306">OS user management</li><li id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_en-us_topic_0152872047_li13812138183116">Switch from the KVM/VMM page to the <strong id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_en-us_topic_0152872047_b4831142182014">Online Users</strong> page</li><li id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_en-us_topic_0152872047_li1384814467309">Restoration of factory settings</li><li id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_li6113501213">VNC password and login rules</li><li id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_li73071714111317">Retire System</li></ul>
</td>
</tr>
<tr id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_row5350141474212"><td class="cellrowborder" valign="top" width="25.05%" headers="mcps1.3.2.4.2.3.1.1 "><p id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_p9350191414211">Basic Mgmt</p>
</td>
<td class="cellrowborder" valign="top" width="74.95%" headers="mcps1.3.2.4.2.3.1.2 "><p id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_en-us_topic_0272351720_en-us_topic_0230697708_p2619112035111">Perform basic configuration of server out-of-band management.</p>
<p id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_en-us_topic_0272351720_en-us_topic_0230697708_p103612416310"><strong id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_en-us_topic_0272351720_en-us_topic_0230697708_b1456942915516">Basic Mgmt</strong> includes the following:</p>
<ul id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_ul13762483114"><li id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_li23720243314">Configuration of product information</li><li id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_en-us_topic_0272351720_en-us_topic_0230697708_li123717246310">Storage management, network configuration, firmware update, and language management</li><li id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_en-us_topic_0272351720_en-us_topic_0230697708_li037102413313">NTP &amp; time zone settings</li><li id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_li1837182403113">Smart cooling</li><li id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_li237172463113">Alarm and event management</li><li id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_en-us_topic_0272351720_en-us_topic_0230697708_li547119288312">Web session mode and timeout period settings</li><li id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_li638142483114">Alarm settings (SMTP/trap settings)</li><li id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_li1173615427127">USB management</li><li id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_li147061610131520">Smart Provisioning management</li></ul>
</td>
</tr>
<tr id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_row2350514154219"><td class="cellrowborder" valign="top" width="25.05%" headers="mcps1.3.2.4.2.3.1.1 "><p id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_p1035014149422">Remote Control</p>
</td>
<td class="cellrowborder" valign="top" width="74.95%" headers="mcps1.3.2.4.2.3.1.2 "><ul id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_ul124769401310"><li id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_li17476540153116">Perform remote server management using the HTML5 integrated remote consoleor VNC client.</li><li id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_li3477174017318">Set the KVM timeout period, communication encryption, local KVM, persistent virtual keyboard and mouse, maximum number of sessions, and number of active sessions</li><li id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_li13596125383115">Set the VNC timeout period, keyboard layout, and SSL encryption</li><li id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_en-us_topic_0272351720_en-us_topic_0230697708_li164771140163116">Configure the serial port redirection</li></ul>
</td>
</tr>
<tr id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_row1235011147423"><td class="cellrowborder" valign="top" width="25.05%" headers="mcps1.3.2.4.2.3.1.1 "><p id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_en-us_topic_0152872047_p13449181161411">VMM</p>
</td>
<td class="cellrowborder" valign="top" width="74.95%" headers="mcps1.3.2.4.2.3.1.2 "><ul id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_en-us_topic_0152872047_ul1834961019321"><li id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_en-us_topic_0152872047_li17349181013326">Forcibly disconnect sessions</li><li id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_en-us_topic_0152872047_li9350121013220">Use virtual media</li></ul>
</td>
</tr>
<tr id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_row935021418421"><td class="cellrowborder" valign="top" width="25.05%" headers="mcps1.3.2.4.2.3.1.1 "><p id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_p0350181413420">Security Mgmt</p>
</td>
<td class="cellrowborder" valign="top" width="74.95%" headers="mcps1.3.2.4.2.3.1.2 "><p id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_en-us_topic_0152872047_p132844272321">Perform configuration and query of security features.</p>
<p id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_en-us_topic_0152872047_p203161646135013"><strong id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_en-us_topic_0152872047_b831604619503">Security Mgmt</strong> includes the following:</p>
<ul id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_en-us_topic_0152872047_ul128572703213"><li id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_en-us_topic_0152872047_li728516272325">Operation log management</li><li id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_en-us_topic_0152872047_li02851727113210">Security log management</li><li id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_en-us_topic_0152872047_li32851427163210">Security hardening settings</li><li id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_en-us_topic_0152872047_li928517273329">Configuration of login rules</li><li id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_en-us_topic_0152872047_li328512279329">Login security banner configuration</li><li id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_en-us_topic_0152872047_li12286627153217">Port service management</li><li id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_en-us_topic_0152872047_li228615272328">Web service management (setting HTTP and port, HTTPS and port, and server certificates)</li><li id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_en-us_topic_0152872047_li172864270320">KVM settings (enabling or disabling the KVM and setting the KVM port)</li><li id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_en-us_topic_0152872047_li1811259145618">VMM settings (enabling or disabling the VMM and setting the VMM port)</li></ul>
<ul id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_ul128572703213"><li id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_li2286152773220">VNC settings (enabling or disabling the VNC and setting the VNC port)</li><li id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_li1428742715322">SNMP settings (enabling or disabling the NMP and setting the NMP port)</li><li id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_li2680143215282">Alarm settings (syslog settings)</li><li id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_li3287172714322">One-click information collection</li></ul>
</td>
</tr>
<tr id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_row143511014104218"><td class="cellrowborder" valign="top" width="25.05%" headers="mcps1.3.2.4.2.3.1.1 "><p id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_en-us_topic_0152872047_p1446418113146">Power Control</p>
</td>
<td class="cellrowborder" valign="top" width="74.95%" headers="mcps1.3.2.4.2.3.1.2 "><ul id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_en-us_topic_0152872047_ul2741946193211"><li id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_li082319593619">PSU settings</li><li id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_en-us_topic_0152872047_li57534617321">Power capping settings</li><li id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_en-us_topic_0152872047_li88471551163211">Power-on and power-off of the server</li></ul>
</td>
</tr>
<tr id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_row193511414174212"><td class="cellrowborder" valign="top" width="25.05%" headers="mcps1.3.2.4.2.3.1.1 "><p id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_en-us_topic_0152872047_p04641213142">Diagnostics</p>
</td>
<td class="cellrowborder" valign="top" width="74.95%" headers="mcps1.3.2.4.2.3.1.2 "><p id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_p143506411334">Perform fault locating and commissioning operations.</p>
<p id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_p15350540335"><strong id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_en-us_topic_0152872047_b1022413485111">Diagnostics</strong> includes the following:</p>
<ul id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_ul03506413334"><li id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_en-us_topic_0152872047_li1235017413312">System log management</li><li id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_en-us_topic_0152872047_li6350184183315">Access to the maintenance and commissioning interface</li><li id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_en-us_topic_0152872047_li235013423311">Sensor simulation</li><li id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_en-us_topic_0152872047_li3351144193318">Configuration of automatic video recording</li><li id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_en-us_topic_0152872047_li53514417335">Manual and automatic screenshots</li><li id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_en-us_topic_0152872047_li12247714113316">Serial port data</li><li id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_en-us_topic_0152872047_li15351243332">Black box</li></ul>
</td>
</tr>
<tr id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_row23514148420"><td class="cellrowborder" valign="top" width="25.05%" headers="mcps1.3.2.4.2.3.1.1 "><p id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_en-us_topic_0152872047_p04649111141">Query</p>
</td>
<td class="cellrowborder" valign="top" width="74.95%" headers="mcps1.3.2.4.2.3.1.2 "><p id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_en-us_topic_0152872047_p49161031143317">Query information excepting security settings, diagnostics, online user settings, and system information.</p>
</td>
</tr>
<tr id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_row03511314134213"><td class="cellrowborder" valign="top" width="25.05%" headers="mcps1.3.2.4.2.3.1.1 "><p id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_p19351814114218">Own Password &amp; SSH</p>
<p id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_p16795650143619"></p>
</td>
<td class="cellrowborder" valign="top" width="74.95%" headers="mcps1.3.2.4.2.3.1.2 "><p id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_p1630203111484">Configure their own passwords and manage the SSH public key, SNMPv3 encryption password, and SNMPv3 encryption and authentication algorithms.</p>
<p id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_p1994714472810">System default users have this permission by default.</p>
</td>
</tr>
<tr id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_row9785324115119"><td class="cellrowborder" valign="top" width="25.05%" headers="mcps1.3.2.4.2.3.1.1 "><p id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_p24035312222">Operation</p>
</td>
<td class="cellrowborder" valign="top" width="74.95%" headers="mcps1.3.2.4.2.3.1.2 "><p id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_p104031431172219">Click <strong id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_b18651111274511">Edit</strong>. The fields of <strong id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_b758920410497">Basic Mgmt</strong>, <strong id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_b75201392462">Remote Control</strong>, <strong id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_b2507162411469">VMM</strong>, <strong id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_b219751894717">Security Mgmt</strong>, <strong id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_b1320492114471">Power Control</strong>, and <strong id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_b139932874717">Diagnostics</strong> are editable.</p>
  <div class="note" id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_en-us_topic_0152872047_note1629316203218"><img src="public_sys-resources/note_3.0-en-us.png"><span class="notetitle"> </span><div class="notebody">
    <ul><li>Only users with the user management permission can delete custom role.</li>
      <li>After a custom role is deleted, related users and groups will be changed to common users. Exercise caution when performing this operation.</li></ul>
  </div></div>
</td>
</tr>
</tbody>
</table>
</div>

<div class="tablenoborder"><table cellpadding="4" cellspacing="0" summary="" id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_table10844118194114" frame="border" border="1" rules="all"><caption><b>Table 4 </b>Login Security Banner</caption><thead align="left"><tr id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_row78519818413"><th align="left" class="cellrowborder" valign="top" width="25%" id="mcps1.3.2.5.2.3.1.1"><p id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_en-us_topic_0272351720_en-us_topic_0230697708_p1148011151415">Parameter</p>
</th>
<th align="left" class="cellrowborder" valign="top" width="75%" id="mcps1.3.2.5.2.3.1.2"><p id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_en-us_topic_0272351720_en-us_topic_0230697708_p1385588114119">Description</p>
</th>
</tr>
</thead>
<tbody><tr id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_row13857684412"><td class="cellrowborder" valign="top" width="25%" headers="mcps1.3.2.5.2.3.1.1 "><p id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_en-us_topic_0272351720_en-us_topic_0230697708_p348011161417">Security Banner</p>
</td>
<td class="cellrowborder" valign="top" width="75%" headers="mcps1.3.2.5.2.3.1.2 "><p id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_en-us_topic_0272351720_en-us_topic_0230697708_p8835165142419">Login security banner, which can be enabled or disabled.</p>
<p id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_en-us_topic_0272351720_en-us_topic_0230697708_p4934327114713">If it is set to <span><img id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_image1221123611368" src="figure/en-us_image_0000001318424853.png"></span>, security information configured here will be displayed on the <span id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_en-us_topic_0269442969_ph1970530225">BMC</span> login page.</p>
<p id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_en-us_topic_0272351720_en-us_topic_0230697708_p993542715473">It is enabled by default.</p>
</td>
</tr>
<tr id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_row386648204113"><td class="cellrowborder" valign="top" width="25%" headers="mcps1.3.2.5.2.3.1.1 "><p id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_en-us_topic_0272351720_en-us_topic_0230697708_p34808191416">Security Banner Text</p>
</td>
<td class="cellrowborder" valign="top" width="75%" headers="mcps1.3.2.5.2.3.1.2 "><p id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_en-us_topic_0272351720_en-us_topic_0230697708_p12819178132518">Security banner text to be displayed on the login page.</p>
<p id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_en-us_topic_0272351720_en-us_topic_0230697708_p58195842513">Value: a string of up to 1024 characters.</p>
</td>
</tr>
</tbody>
</table>
</div>
</div>
<div class="section" id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_section313934715392"><h4 class="sectiontitle">Enabling the Security Hardening Function</h4><ol id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_en-us_topic_0152872047_ol197519491397"><li id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_en-us_topic_0152872047_li4754494917"><span>Set parameters as required. For details about the parameters, see <a href="#EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_table1499123114383">Table 1</a>.</span></li><li id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_en-us_topic_0152872047_li1275154914914"><span>Click <strong id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_en-us_topic_0152872047_b4241201904814">Save</strong>.</span></li></ol>
</div>
<div class="section" id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_section1814154773910"><h4 class="sectiontitle">Configuring Login Rules</h4><p id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_en-us_topic_0152872047_p2107151663212">The <span id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_ph1074619437175">BMC</span> supports up to three login rules. Users who comply with any one of the three rules can log in to the <span id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_ph15328546121711">BMC</span>.</p>
<p id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_p53681332172716">A login rule is effective for local users, LDAP groups, SNMPv3 services or interfaces of CLP(ssh), KVM_VMM, RMCP, and Redfish interfaces only when it meets the following two conditions:</p>
<ul id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_en-us_topic_0152872047_ul7107101619325"><li id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_en-us_topic_0152872047_li210741617327">The login rule is configured and enabled in the <strong id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_en-us_topic_0152872047_b1910761633217">Login Rules</strong> area.</li><li id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_en-us_topic_0152872047_li10107716103213">The login rule is selected in the configuration area.</li></ul>
<div class="note" id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_en-us_topic_0152872047_note1629316203218"><img src="public_sys-resources/note_3.0-en-us.png"><span class="notetitle"> </span><div class="notebody"><ul id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_ul1885225519487"><li id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_li3853155104817">If a login rule is empty and the rule status is enabled and saved, there is no login restrictions.</li><li id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_li1985315513488">If the login rule text box is empty, there is no login rule restriction.</li></ul>
</div></div>
<ol id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_ol115823563915"><li id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_en-us_topic_0152872047_li1358216561096"><span>In the <strong id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_en-us_topic_0152872047_b61481538164820">Login Rules</strong> tab page, click <strong id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_en-us_topic_0152872047_b21481338184813">Edit</strong> in the <strong id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_en-us_topic_0152872047_b2864741104810">Operation</strong> column.</span></li><li id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_en-us_topic_0152872047_li75827565914"><span>Set the rule status to <span><img id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_image57601615115210" src="figure/en-us_image_0000001318424853.png"></span>.</span></li><li id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_en-us_topic_0152872047_li75821563916"><span>Set the login rules. For details about the parameters, see <a href="#EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_table98235518268">Table 2</a>.</span></li><li id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_en-us_topic_0152872047_li12145192115492"><span>Click <span class="uicontrol" id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_en-us_topic_0152872047_uicontrol414582134918"><b>Save</b></span>.</span></li></ol>
</div>
<div class="section" id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_section13142194763911"><h4 class="sectiontitle">Add Custom Role</h4>
  <p >Only users with the user management permission can add custom role. A maximum of 16 custom roles can be created.</p>
  <div class="note" id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_en-us_topic_0152872047_note1629316203218"><img src="public_sys-resources/note_3.0-en-us.png"><span class="notetitle"> </span><div class="notebody">
    <p >In some customization scenarios, custom roles can be created. After a custom role is created and associated with a user, user loading may fail if the user is rolled back to the earlier version. Therefore, exercise caution when performing this operation.</p>
  </div></div>
  <ol id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_ol132481325184913">
    <li id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_en-us_topic_0230697708_li18674174513412"><span>Click <span class="uicontrol" id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_en-us_topic_0230697708_uicontrol1637598174194501"><b>Add Custom Role</b></span>.</span><p><p id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_en-us_topic_0230697708_p8822501941">The dialog box displayed.</p>
  </p></li>
  <li id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_en-us_topic_0230697708_li116741745241"><p id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_en-us_topic_0230697708_p8822501941">Enter the current user password and click <span class="uicontrol" id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_en-us_topic_0230697708_uicontrol1581806632194501"><b>OK</b></span>.</p></li> </ol>
  </div>
<div class="section" id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_section13142194763911"><h4 class="sectiontitle">Configuring Custom Roles</h4><p id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_en-us_topic_0230697708_set02">The operation permissions of the default roles (<span class="parmvalue" id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_en-us_topic_0230697708_parmvalue1752359867194501"><b>Administrator</b></span>, <span class="parmvalue" id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_en-us_topic_0230697708_parmvalue1946007964194501"><b>Operator</b></span>, and <span class="parmvalue" id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_en-us_topic_0230697708_parmvalue1357898194194501"><b>Common User</b></span>) cannot be modified, but the administrator can set the operation permissions for custom roles.</p>
<ol id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_ol132481325184913"><li id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_en-us_topic_0230697708_li116741745241"><span>In the function list, select modules for the custom roles.</span><p><p id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_p2401148184919"><a href="#EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_table8169181424213">Table 3</a> describes the permissions.</p>
</p></li><li id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_en-us_topic_0230697708_li18674174513412"><span>Click <span class="uicontrol" id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_en-us_topic_0230697708_uicontrol1637598174194501"><b>Save</b></span>.</span><p><p id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_en-us_topic_0230697708_p8822501941">In the dialog box displayed, enter the current user password and click <span class="uicontrol" id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_en-us_topic_0230697708_uicontrol1581806632194501"><b>OK</b></span>.</p>
</p></li></ol>
</div>
<div class="section" id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_section1814214719397"><h4 class="sectiontitle">Setting the Login Security Banner</h4><ol id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_en-us_topic_0152872047_ol254620319505"><li id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_en-us_topic_0152872047_li254614315506"><span>On the <strong id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_en-us_topic_0152872047_b1854773175012">Login Security Banner</strong> tab page, set <strong id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_en-us_topic_0152872047_b554717312505">Security Banner</strong> to <span><img id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_image48035420366" src="figure/en-us_image_0000001318424853.png"></span>.</span></li><li id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_en-us_topic_0152872047_li75478305014"><span>Enter the security information in the security banner text box.</span></li><li id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_en-us_topic_0152872047_li168101497504"><span>Click <strong id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_en-us_topic_0152872047_b175479310503">Save</strong>.</span></li></ol>
</div>
<div class="section" id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_section16143144720393"><h4 class="sectiontitle">Restoring the Default Login Security Banner</h4><ol id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_en-us_topic_0152872047_ol15103152355017"><li id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_en-us_topic_0152872047_li1510316238508"><span>On the <strong id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_en-us_topic_0152872047_b1103423125018">Login Security Banner</strong> tab page, set <strong id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_en-us_topic_0152872047_b11103122315019">Security Banner</strong> to <span><img id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_image162821945153616" src="figure/en-us_image_0000001318424853.png"></span>.</span></li><li id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_en-us_topic_0152872047_li14103172395011"><span>Click <strong id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_en-us_topic_0152872047_b181032233508">Restore Defaults</strong>.</span></li><li id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_en-us_topic_0152872047_li10104623125019"><span>Click <strong id="EN-US_TOPIC_0000001206156996__en-us_topic_0000001206629050_en-us_topic_0152872047_b4104162375018">Save</strong>.</span></li></ol>
</div>
</div>

</body>
</html>